Security audit
CREA DDF MCP
Security checks across malware telemetry and agentic risk
Overview
This skill is a disclosed setup guide for connecting a user-controlled MCP server to CREA DDF data, with expected credential and MCP runtime risks.
Install only if you have a trusted copy of the referenced MCP server package. Use least-privilege DDF credentials, prefer client credentials over password grant when available, keep secrets out of committed files, and register the MCP server only in agent runtimes you trust.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.